Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/23b377c9d6180a4196fccd52d97eace53eda82a8.roa
File: 23b377c9d6180a4196fccd52d97eace53eda82a8.roa (raw, json)
Hash identifier: QePJnzfVM06f1ggmwR0LHi/+NfOIR7KQYs6B6+wauwY=
Subject key identifier: D9:B4:DF:7D:8F:E9:3F:2E:90:87:E6:1B:7C:82:4E:02:05:2D:30:AC
Certificate issuer: /CN=3f82c3ad9e5010fae8956f061f054fe6125c235c
Certificate serial: 1CFD6B
Authority key identifier: 2B:45:37:66:5F:9D:C8:57:E0:B5:E0:35:69:B2:E8:73:65:BD:BE:C6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f82c3ad9e5010fae8956f061f054fe6125c235c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/23b377c9d6180a4196fccd52d97eace53eda82a8.roa
Signing time: Thu 07 Sep 2023 15:09:38 +0000
ROA not before: Wed 06 Sep 2023 15:09:38 +0000
ROA not after: Sun 07 Sep 2025 15:09:38 +0000
asID: 9009
IP address blocks: 200.107.205.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1899883 (0x1cfd6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f82c3ad9e5010fae8956f061f054fe6125c235c
Validity
Not Before: Sep 6 15:09:38 2023 GMT
Not After : Sep 7 15:09:38 2025 GMT
Subject: CN=23b377c9d6180a4196fccd52d97eace53eda82a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8a:32:14:24:ee:e3:47:2f:e7:d0:49:33:7c:
cf:c4:e6:bf:6d:08:8f:ff:56:b2:26:6f:d3:26:ca:
0a:8b:99:7a:2a:ec:55:b7:40:a2:cc:a5:b6:4b:44:
6b:17:92:e9:5d:e3:9a:5a:29:fe:91:02:f8:41:ed:
19:f0:1f:5d:27:88:ec:f3:32:2a:2f:0d:e6:b4:a7:
9e:6e:c2:67:2d:80:a1:92:6d:0b:56:eb:9c:cc:69:
75:28:2d:76:0a:3d:f9:30:7a:c1:a7:0c:88:72:59:
59:fa:a8:dd:0f:e7:de:4e:85:5e:8e:a1:d5:2d:45:
56:62:ec:e0:58:a7:b5:28:79:bc:4c:76:7a:5f:65:
bc:4b:43:36:28:bb:26:dc:5d:9a:a6:59:9f:b8:07:
b1:f5:3c:46:8b:df:e8:cb:7e:6c:f0:00:1e:b2:27:
67:2a:29:69:01:93:65:cd:04:8a:85:15:fa:bb:fa:
09:a7:42:8b:ec:e4:8e:a0:3a:9c:89:21:17:0d:60:
7c:dd:62:cd:54:d2:6d:05:b0:e7:ec:16:6b:c0:f8:
21:14:bb:9f:17:6a:74:15:6b:ff:bd:2d:d2:65:3b:
c5:ac:7e:04:0c:89:d6:65:48:b8:bb:1a:20:17:2f:
07:07:f2:b5:ad:66:d3:e2:5a:fd:11:ef:c2:5c:82:
f0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B4:DF:7D:8F:E9:3F:2E:90:87:E6:1B:7C:82:4E:02:05:2D:30:AC
X509v3 Authority Key Identifier:
keyid:2B:45:37:66:5F:9D:C8:57:E0:B5:E0:35:69:B2:E8:73:65:BD:BE:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f82c3ad9e5010fae8956f061f054fe6125c235c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/23b377c9d6180a4196fccd52d97eace53eda82a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/3f82c3ad9e5010fae8956f061f054fe6125c235c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.107.205.0/24
Signature Algorithm: sha256WithRSAEncryption
03:0b:42:fc:d0:5d:a5:c9:ae:19:37:f6:c0:88:9a:7e:29:13:
e9:57:f8:d9:13:b6:cc:ef:b6:10:ca:a6:61:74:8a:c9:83:39:
51:d1:d1:28:7a:6d:dc:29:ee:45:b1:be:11:26:57:d8:e4:1f:
83:78:4e:e0:2c:3d:2e:ea:90:13:c9:64:ae:84:b0:d1:35:9d:
ee:a8:3c:75:fe:ee:33:b5:99:85:83:74:25:c8:af:84:24:b5:
9a:1a:8a:0c:3d:a7:90:b5:c6:63:c1:b1:4c:29:d1:11:a1:57:
1d:d2:79:a0:46:24:77:5f:3c:88:ba:bd:cd:ec:e4:ba:15:6d:
19:aa:8f:9c:01:b8:24:ac:82:ce:e2:59:95:e2:51:35:fe:96:
9d:ab:95:d1:57:c2:85:9a:2e:21:31:c8:dc:f7:03:92:6d:80:
c0:cf:40:a1:68:1f:aa:a8:5b:0c:18:e4:c4:2b:1d:b4:4a:a9:
0c:ea:09:66:3c:2f:40:61:46:36:7e:8e:fc:db:5e:43:ff:6f:
c3:31:83:b7:ae:4d:54:3b:44:f0:64:6d:20:3b:44:fa:fa:05:
84:c2:58:43:b3:ea:a9:d1:c8:64:33:98:00:be:2d:eb:46:ac:
ff:90:67:6d:3e:02:0e:a6:b1:5e:2d:6d:15:4c:d8:92:01:f0:
db:9a:41:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 7 17:11:21 2023 by rpki-client on console-ams.rpki-client.org